
Claims 

What is claimed is: 

A method of creating a report having security based on content of data 
c6^itained in the report, the method comprising: 

retrieving a data row having data to be contained in the report; 
determining whether data in the data row will cause a data break; 
forming a first security tag if the data row causes a data break; 
associating the first security tag with a new page in the report wherein 
the data row isNplaced on the new page; and 
1 0 placing subsequent data rows on pages having the first security tag 

until a second security tag is formed such that data in the report is organized 
based on a plurality oiSsecurity tags. 

2. A method as reciteasyi claim 1 wherein the report is generated from 
1 5 one executable component. 

3. A method as recited in claft^i 1 wherein forming a first security tag 
further comprises: 

retrieving a security identifier ffcn: each data break wherein each data 
20 break is associated with one or more security identifiers; and 

combining the one or more security\dentifiers thereby creating a 
security tag. 

4. A method as recited in claim 3 wherein associating the first security 
25 tag with a new page in the report further comprises: 

associating a role adopted from a security system with a data row; 

mapping security identifiers in the security tag with one or more roles 
adopted from the security system thereby creating a security tag adaptable by 
the security system; and 
30 associating the security tag adaptable by the security sy^em to a page 

in the report. 

5. A method as recited in claim 4 wherein the security system ha\a 
plurality of roles and a plurality of users. 
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A method as recited in claim 4 wherein mapping security identifiers in 
th^security tag with one or more roles further comprises: 

identifying a data column in the retrieved data row upon which a data 
break \s based; and 

identifying one or more roles in the security system that correspond to 
the data column. 

7 A method as recited in claim 6 further comprising deriving translation 
10 rules to map throne or more roles in the security system with the data 
column. 



15 



8. A method asVecited in claim 1 further comprising: 
retrieving the data from a data source; and 

sorting the data from the data source based on one or more data breaks 
wherein a data break is caused by a change in category of data. 
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9. A method as recited iH claim 8 wherein a data break is a level break in 
the data. 

10. A method as recited in claifri 1 further comprising: 
determining a first role in a security system that corresponds directly to 

the user; 

determining one or more secondary roles that correspond indirectly to 
the user; and 

combining the first role with the oil^ or more secondary roles thereby 
creating a security clearance for the user. 



11. A method as recited in claim 1 0 further Comprising: 
30 comparing the security clearance with a security tag to derive a subset 

of pages in the report that can be viewed by the use 



12. A method of viewing a report having a security tag associated with 
pages in the report such that a user can only view data Authorized to be shown 
35 to the user, the method comprising: 
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retrieving a report having a superset of pages, a page from the superset 
)ages having a security tag; 

obtaining a list of security identifiers associated with the user; 
comparing the list of security identifiers with a plurality of security 
tags associated with the report; and 

deriving a subset of pages from the superset of pages based on the 
comparisofi such that the subset of pages only contains data that the user is 
authorized to view. 

10 13. A method as recited in claim 1 2 further comprising presenting the 
subset of pages as"a report to the user. 
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14. A method as Recited in claim 13 further comprising renumbering pages 
in the subset of pages siich that the first page in the subset of pages is page one 
and subsequent pages areyrenumbered consecutively. 



1 5 A method as recited \n claim 14 wherein renumbering pages in the 
subset of pages further comprises: 

creating a first page mamiaving a first plurality of complete cells for 
20 the superset of pages wherein a complete cell represents a page; 

determining whether a cell W the first plurality of complete cells 
represents a page the user is authorized to view; and 

creating a second page map having a second plurality of partial cells 
wherein a partial cell represents a viewable page. 

25 

16. A method as recited in claim 15 wherein creating a first page map 
further comprises: 

comparing the list of security identifiers associated with the user with a 
plurality of security tags associated with the report; and 
30 associating a value with each complete ce\l based on whether the user 

can view a particular page. 
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17 A method as recited in claim 15 wherein determining whether a cell 
from the first plurality of complete cells represents a page further comprises: 
examining the content of a cell. 
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[8. A method as recited in claim 15 wherein creating a second page map 
ler comprises: 

creating a partial page map cell that corresponds to a complete cell 
representing a page in the report; and 

inserting a first page map index value corresponding to the complete 
cell intosthe partial cell. 
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19. A method as recited in claim 15 further comprising: 

inserting a second page map index value into a complete cell 
corresponding tsp a particular page the user is authorized to view. 



in 



15 



20 



25 



20. A method &s recited in claim 15 further comprising: 
inserting a partial page number from the first page map into a page 

number component in\i page in the report. 

21. A method as reciffed in claim 12 further comprising mapping level 
break identifiers in the security tag with security identifiers in the list of 
security identifiers associate^ with the user. 

22. A method as recited in ctaim 21 wherein comparing the list of security 
identifiers further comprises comparing the level break identifiers in a security 
tag with the security identifiers in tn^ list of security identifiers associated 
with the user. 

23. A method as recited in claim 12 v^herein the list of security identifiers 
is derived from a security system. 




24. A method as recited in claim 12 where^ deriving a subset of pages 
from the superset of pages further comprises: 
30 determining a commonality between the security tag and the list of 

security identifiers; and 

including a page in the subset of pages if the Security tag and the list of 
security identifiers pass the threshold level of commonality when compared. 
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235. A method as recited in claim 24 wherein the threshold level of 
commonality is having one term in the security tag and the list of security 
identifiers in common. 



26. X method as recited in claim 12 further comprising deriving content 
information including page numbers related to the subset of pages. 
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27. A method as recited in claim 26 wherein the content information only 
contains information related to the subset of pages and generally reflects a 
level break structure of the subset of pages. 



28. A computer-readable medium containing programmed instructions 
arranged to generate a\report having security based on content of data 
contained in the report m a computer system, the computer-readable medium 
1 5 including programmed instructions for: 

retrieving a data row having data to be contained in the report; 

determining whetherdata in the data row will cause a data break; 

forming a first security, tag if the data row causes a data break; 

associating the first security tag with a new page in the report wherein 
20 the data row is placed on the newvpage; and 

placing subsequent data rows on pages having the first security tag 
until a second security tag is formedN^uch that data in the report is presented 
based on a plurality of security tags. 

25 29. A computer-readable medium asVecited in claim 28, wherein the 

programmed instructions for forming a firs^ security tag further comprises 

programmed instructions for: 

retrieving a security identifier for eachMata break wherein each data 

break contains one or more security identifiers; Vnd 
30 combining the one or more security identixjers thereby creating a 

security tag. 
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30. A computer-readable medium as recited in claim 28, wherein the 
programmed instructions for associating the first security tag with a new page 
in the report further comprises: 

associating a role adopted from a security system Wjth a data row; 



Attorney Docket No. ACTUP002 



51 



PATENT 




mapping security identifiers in the security tag with one or more roles 
adopted from the security system thereby creating a security tag adaptable by 
the security system; and 

\ N associating the security tag adaptable by the security system to a page 
5 in the report. 

31. A computer-readable medium as recited in claim 28, wherein the 
programmed instructions for mapping security identifiers in the security tag 
with one or more roles further comprises: 
10 identifying a data column in the retrieved data row upon which a data 

break is based; and 

identifying one or more roles in the security system that correspond to 
the data column. * 

\ 

i 
'» 

15 32. A computeryeadable medium containing programmed instructions 
arranged to view a report having a security tag associated with pages in the 
report such that a user can only view data authorized to be shown to the user, 
the computer-readable\medium including programmed instructions for: 

retrieving a repeat having a superset of pages, a page from the superset 
20 of pages having a security tag; 

obtaining a list of security identifiers associated with the user; 
comparing the list 6f security identifiers with a plurality of security 
. tags associated with the report; and 

deriving a subset of pages from the superset of pages based on the 
25 comparison such that the subset of pages only contains data that the user is 
authorized to view. 

33. A computer-readable medium as recited in claim 32, wherein the 
programmed instructions for renumbering pages in the subset of pages further 
30 comprises: 

creating a first page map havink a first plurality of complete cells for 
the superset of pages wherein a complete, cell represents a page; 

determining whether a cell from tnfe first plurality of complete cells 
represents a page the user is authorized to view; and 
35 creating a second page map having a second plurality of partial cells 

wherein a partial cell represents a viewable pag 
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A computer-readable medium as recited in claim 32, wherein the 
led instructions for creating a first page map further comprises: 
\comparing the list of security identifiers associated with the user with a 
pluralityW security tags associated with the report; and 

associating a value with each complete cell based on whether the user 
can view a pVticular page. 
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